Currently there is only a privilege to allow users to join external groups. There is no way to distinguish the difference between groups that belong to a trusted partner collaborating organization. It would be great to allow users to join partner collaboration groups without granting them the permission to join ANY external groups.